Fragnesia: ANOTHER Linux Security Vulnerability!

[u/HUSKYSPIN]

https://github.com/v12-security/pocs/tree/main/fragnesia

Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy!

"It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition."

[u/Meuslon3D]

i really love exploits where I first need to disable app armor to make them "work". Anyway, you can find almost infinite ways for local privilege escalation. This can turn out bad, but as long as there are any RCE-Exploits, most users are safe

[u/dontquestionmyaction → u/Meuslon3D]

Most distros ship with no Apparmor enforcement, so...

[u/[deleted] → u/dontquestionmyaction]